$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer (raw, json) Hash identifier: T6MySgt/q/4fNee5BXq+7eDSEnJ5gmD7XCMbe4a7Duo= Subject key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10FB016C54E489AD3123DD0536F2688B9138DE43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft caRepository: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 28 Nov 2023 06:47:08 +0000 Certificate not after: Tue 26 Nov 2024 06:52:08 +0000 Subordinate resources: IP: 103.142.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fb:01:6c:54:e4:89:ad:31:23:dd:05:36:f2:68:8b:91:38:de:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 06:47:08 2023 GMT Not After : Nov 26 06:52:08 2024 GMT Subject: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:64:03:fe:96:18:e0:f1:b2:19:ca:a9:50: 72:8a:11:8c:00:2d:cd:55:10:da:b8:0c:ae:3d:57: 5f:f7:ad:e0:e1:b4:98:c2:83:c8:1c:42:c8:01:ef: 1d:1b:14:8b:18:03:6a:03:9d:e5:5a:ce:37:94:21: 35:9c:12:3d:99:f6:11:37:5e:1d:1a:1c:37:7f:6a: 27:d2:4a:4e:35:d5:c9:45:92:f3:aa:95:3f:fd:b9: c1:29:0b:45:cc:c5:38:d5:c3:bf:a8:00:5e:f2:25: 8c:5a:72:dd:a8:c2:fe:10:45:6a:eb:0c:1e:b0:8a: ff:e0:7f:0c:99:55:a0:d2:0b:b7:39:a3:2c:22:c3: 99:74:e4:9c:cd:a7:89:cb:8b:bb:11:c5:93:28:90: e1:49:ba:75:d3:d4:ee:19:8e:f0:d8:2a:ba:e0:71: 43:1d:89:12:f5:df:b6:55:f4:47:ef:24:78:7d:bd: 3e:3c:52:bb:9a:28:ed:f1:8a:0e:39:14:3c:07:e0: e6:cd:de:60:53:9f:51:04:9e:92:42:0e:e3:76:19: f4:bc:ba:5c:b2:87:c9:ca:ae:60:5f:73:e9:cf:53: 5a:13:76:88:76:85:5e:74:6e:aa:bd:be:f2:85:32: 79:a0:65:21:e7:d2:0f:eb:26:df:0e:7e:99:d3:80: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.60.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:be:38:b5:1a:97:b1:19:2e:b4:79:29:b4:f9:d0:12:61:58: c5:c5:c9:65:03:65:ae:f7:7c:65:05:68:1b:f7:05:39:a1:c4: 6b:8b:63:7c:b0:5b:9c:ef:42:1b:3e:a2:87:5b:5a:a0:79:01: b7:55:5e:1a:cb:60:b8:50:27:8f:8d:af:39:6a:8b:f3:98:ed: 30:bc:9e:22:81:30:95:bd:7e:c6:8f:17:1d:15:6a:f4:8e:33: 37:2d:5f:76:2d:ee:15:08:7d:3b:d6:c2:ca:83:11:ef:cb:b7: 17:ca:7e:61:63:78:9d:89:1c:ee:7c:2f:48:fc:8d:ce:42:04: 11:aa:0a:fa:69:32:64:0f:54:27:c0:3a:46:39:ff:c1:13:ed: 4d:03:40:55:46:6d:2a:8a:2a:cf:dc:bd:37:b5:bf:b0:36:a8: f7:0a:95:ea:30:d5:ae:20:de:52:51:88:10:34:10:96:04:b2: 7b:c2:c0:57:c4:9e:0b:5e:fe:e7:0d:6a:e0:53:09:76:94:b4: c5:97:82:a3:af:70:7d:09:83:41:66:fc:e1:3b:61:3c:2b:77: 98:a6:2b:6d:f7:98:0a:1a:73:28:98:37:d3:2e:6d:85:b2:0f: 29:37:c9:e8:ed:a7:0c:e6:4c:47:18:4f:27:33:3e:41:31:98: 28:04:f8:28 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEPsBbFTkia0xI90FNvJoi5E43kMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyODA2NDcwOFoX DTI0MTEyNjA2NTIwOFowMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFC NDQ1MjA4Q0MyMjREQ0U5NzRCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCYZAP+lhjg8bIZyqlQcooRjAAtzVUQ2rgMrj1XX/et4OG0mMKDyBxCyAHv HRsUixgDagOd5VrON5QhNZwSPZn2ETdeHRocN39qJ9JKTjXVyUWS86qVP/25wSkL RczFONXDv6gAXvIljFpy3ajC/hBFausMHrCK/+B/DJlVoNILtzmjLCLDmXTknM2n icuLuxHFkyiQ4Um6ddPU7hmO8NgquuBxQx2JEvXftlX0R+8keH29PjxSu5oo7fGK DjkUPAfg5s3eYFOfUQSekkIO43YZ9Ly6XLKHycquYF9z6c9TWhN2iHaFXnRuqr2+ 8oUyeaBlIefSD+sm3w5+mdOA84UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHodGS1lt+6txGq0RSCMwiTc6XS2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3MWJmOTgw LTI0ZGEtNDg2NS1hOTg5LTJkNDQ4OWUzYTUwNS8wLzdBMUQxOTJENjVCN0VFQURD NDZBQjQ0NTIwOENDMjI0RENFOTc0QjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnjjwwDQYJKoZIhvcNAQELBQADggEBAI6+OLUal7EZLrR5KbT50BJhWMXFyWUD Za73fGUFaBv3BTmhxGuLY3ywW5zvQhs+oodbWqB5AbdVXhrLYLhQJ4+Nrzlqi/OY 7TC8niKBMJW9fsaPFx0VavSOMzctX3Yt7hUIfTvWwsqDEe/LtxfKfmFjeJ2JHO58 L0j8jc5CBBGqCvppMmQPVCfAOkY5/8ET7U0DQFVGbSqKKs/cvTe1v7A2qPcKleow 1a4g3lJRiBA0EJYEsnvCwFfEngte/ucNauBTCXaUtMWXgqOvcH0Jg0Fm/OE7YTwr d5imK233mAoacyiYN9MubYWyDyk3yejtpwzmTEcYTyczPkExmCgE+Cg= -----END CERTIFICATE-----Generated at Wed May 8 22:46:40 2024 by rpki-client on console-ams.rpki-client.org